Log Encryption

Log Encryption and Obfuscation

logme supports optional log file encryption.

Overview

When encryption is enabled, log files written to disk are obfuscated using the ChaCha stream cipher.

Per-Line Encryption

Each log entry is encrypted independently. This design allows:

• Streaming writes
• Partial file recovery
• Robustness against corruption

Key Management

The encryption key is provided by the application. Key storage and protection are the responsibility of the user.

Threat Model

Log encryption protects log contents at rest. It does not protect against:

• Compromised runtime memory
• Malicious code running in-process